4aac7daf72a253d5698437fb8a772dbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aac7daf72a253d5698437fb8a772dbb_JaffaCakes118
Size

25KB
MD5

4aac7daf72a253d5698437fb8a772dbb
SHA1

5e433aba93c2ce07362e875d394b2ff99d20f598
SHA256

ed4ba8db967a76f3d1bb99509bddf277f224b4ad567ac556118f618d1a909a66
SHA512

c58e16fd2463308095244d8e75a457b969a1c2fb208db89312427f0988cfee08af0d13cf93a2a1502412a3b66a77d9a305c572a58dc018e4a1a9a471c26f673f
SSDEEP

384:QKAG4EXUHuk5Kcq2B7Jw2sqQy6qAjXESZMFyQ+t+1WFdeblR7vvxlL6zzwIksGmX:RAHE4JwJqQymjdqT4+12de77DjIkbzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aac7daf72a253d5698437fb8a772dbb_JaffaCakes118

Files

4aac7daf72a253d5698437fb8a772dbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba08f214694ad8700d7bdda582d0f03f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

SHGetMalloc

advapi32

RegEnumKeyA

comctl32

ord17

ole32

OleInitialize

version

VerQueryValueA

Sections

.MPRESS1
Size: 16KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/MANIFEST/1
.xml